China-Nexus Hackers Attacking Telecommunication Providers With New Malware

A China-linked threat actor, UAT-9244, has been targeting telecommunication providers in South America since 2024 with new malware, including TernDoor, PeerTime, and BruteEntry, to compromise critical infrastructure. This group is linked to known China-nexus APTs like FamousSparrow and Tropic Trooper due to shared tooling and tactics, highlighting the value of telecom networks for intelligence gathering.

Edward Kiledjian @ekiledjian